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Abstract —Natural Disasters like hurricanes, floods or earth¬ 
quakes can damage power grid devices and create cascading 
blackouts and islands. The nature of failure propagation and 
extent of damage is dependent on the structural features of the 
grid, which is different from that of random networks. This 
paper analyzes the structural vulnerahillty of real power grids 
to impending disasters and presents intuitive graphical metrics 
to quantify the extent of damage. Two improved graph eigen¬ 
value based bounds on the grid vulnerability are developed 
and demonstrated through simulations of failure propagation on 
IEEE test cases and real networks. Finally this paper studies 
adversarial attacks aimed at weakening the grid’s structural 
resilience and presents two approximate schemes to determine 
the critical transmission lines that may be attacked to minimize 
grid resilience. The framework can be also be used to design 
protection schemes to secure the grid against such adversarial 
attacks. Simulations on power networks are used to compare the 
performance of the attack schemes in reducing grid resilience. 

I. Introduction 

The topological structure of the power grid is an important 
feature that affects the delivery of electricity fT). From an 
economic perspective, the capacity of transmission lines and 
the graphical properties (whether tree-like or loopy) affect the 
locational marginal electricity prices as well as the conver¬ 
gence of Optimal power flow algorithms El. Insufficient line 
capacities and network structure can lead to highly fluctua¬ 
tion prices and even negative prices El- From an reliability 
perspective, the grid structure influences the extent of damage 
following an natural or man-made disaster. In particular, it 
affects the propagation of failures after an initial breakdown 
of equipment and thus in turn affects the formation of islands 
and loss of service. Over the years, natural disasters like 
earthquakes, floods, hurricanes have caused extensive power 
outages due to damage of grid equipment and loss of network 
connectivity a, 0. Such disasters also affect co-located in¬ 
terdependent transportation and communication infrastructure 
as well. Thus there is a greater need to quantify the effect of 
the grid structure on failure propagation in the grid following 
a natural disaster and to incorporate the insights gained into 
transmission planning techniques to improve grid resilience. 

There is existing work that studies the impact of structure on 
grid reliability. Reference ||6l describes a widely accepted and 
realistic DC model for the propagation of equipment (nodes 
and links) failures in cascading outages in the power grid. 
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Here, the propagation process begins with an initial failure 
of a network node or link which leads to a redistributing of 
the power flows for optimal dispatch. This can lead to some 
transmission lines running above their prescribed capacities 
and subsequently tripping due to overheating. Subsequently 
in 0, the authors incorporate recovery mechanism for the 
tripped transmission lines into the failure model and show 
that the size of blackout has a power-law distribution as seen 
in reality. Reference |[8| analyzes the problem of finding the 
optimal k lines in the grid that can be used for interdiction 
in the grid to create failures. Power Flow based analysis has 
been done to analyze geographically correlated failures in ||9|. 
Similarly, an interdiction based analysis on grid resilience 
considering short term impacts is discussed in 1251 . However, 
these models include solving a Optimal Power Flow (OPF) 
or similar optimization problem to study the propagation of 
failures. Such an approach is harder to analyze. In particular, 
it seldom leads to a closed form expression of a metric or 
parameter that can quantify the resilience of the power grid 
to failures. In a separate line of work, efforts have been made 
to study probabilistic failure propagation in power grids and 
related networks using techniques from percolation theory 
and random graph theory. In this approach, initial failures 
are supposed to propagate probabilistically from source to 
neighboring nodes and edges in the grid graph before termi¬ 
nating. The final state will often include greater number of 
failures than the initial state and efforts are made to study 
the effect of the grid structure in influencing the spread. 
References m, EQi study the effect of removing nodes 
from power grid graphs based on their centrality and degree 
measures and its effect on network connectivity. The authors of 
M analyze the propagation of structural failures in complex 
random networks based on similar neighborhood propagation 
rules. This approach has been extended to study interdependent 
networks failures as well ca where nodes of two different 
networks depend on one another for survivability. Similarly, 
references m, m have analyzed node and edge percolation 
based techniques to understand failure propagation in random 
graphs generated by stochastic geometry. An interaction graph 
based model is presented in na where power flow based 
cascading information is used to generate an interaction graph 
for the network to study the inter-nodal dependencies on 
cascades. A good review of works pertaining to grid resilience 
to natural disasters can be found in E^ . 

It is worth mentioning that parallel analytical techniques are 
also used in studying social, biological and cyber-networks for 
information dissemination and spread of viruses EqI, ED- 
However, the accuracy of percolation based techniques and 
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further of the use of random graphs in modeling power grid 
cascading failures is debatable M- Existing work f22\ . 1^ . 
m has demonstrated that the structure of real power grids 
as well as their finite sizes create significant deviations in 
observed graph parameters from those predicted in random 
graphs. This is because popular random network models like 
Erdos-Renyi, Barabasi-Albert, small world and configuration 
models na do not accurately capture the specific nature 
of the spatio-temporal evolution of power grids. Eurther, 
sharp breakdown thresholds emerge in analysis of topological 
failure models on random graphs that are seldom observed 
in simulations of failures on real grid graphs and IEEE test 
cases ED. Such thresholds arise due to the absence of local 
loops and locally tree-like nature of random graph models 
that are not encountered in real grids. Hence, it is fair to 
suggest that analysis of random graphs to study the failure 
propagation (both probabilistic and power flow based) will 
not extend directly to real grids. 

In this work, we focus on power grid failures induced by 
large natural disasters like hurricanes and earthquakes that 
create disconnected islands in the grid and loss of connectivity. 
We study the size of the largest connected component in the 
post-disaster grid and provide justification for using this as 
a valid metric for grid vulnerability in modern power grids 
and micro-grids that have non-trivial fraction of renewable 
and other distributed generation resources. Note that prior 
literature includes the use of the largest connected graph 
component in simulation based studies of grid failures US). 
This is distinct from failure propagation models where a 
failed node is considered to affect neighboring nodes with a 
degree or physical characteristic based probability. We extend 
probabilistic analysis previously used for random graphs on 
known real grid graphs and popular IEEE test cases to de¬ 
termine computable graphical parameters (Eg. eigenvalues of 
the grid adjacency matrix) that can be used to quantize the 
resilience of grids to such natural disasters. More importantly, 
we present a modified graph construction based on the true 
grid graph and use it to develop improved bounds on the 
extent of damage created in the network by the disaster m. 
The efficacy of the graphical parameter based bounds and 
soft thresholds are demonstrated by simulations of failures on 
publicly available grid data-sets. We then use the graphical 
metrics on grid resilience to identify critical transmission lines 
(graph edges) that maximally affect the grid resilience. In 
particular, we study attack on grid resilience by an adversary 
that aims to damage a set of transmission lines to maximize the 
expected damage to network connectivity following a natural 
disaster. As this problem is NP-hard in general, we present 
two approximate algorithms to determine the optimal edges in 
the adversary’s target set. The first algorithm is based on per¬ 
turbation based analysis of eigen-values of the grid adjacency 
matrix while the second algorithm is based on greedy trace 
minimization of a higher power of the adjacency matrix. The 
performance of our algorithms for attack design in reducing 
grid resilience is demonstrated through simulations and also 
compared with other techniques in literature, notably attacks 
on nodes with high betweenness ll^ or random attacks. 
Erom the system operator or grid controller’s perspective. 


these algorithms can be used to determine the critical lines 
that need to be protected to build resilience and prevent 
further degradation of grid resilience before any impending 
natural disaster. To summarize, our work presents a analytical 
framework to quantify the resilience of real power grid graphs 
to natural disasters and develops two algorithms to determine 
the critical transmission lines that need to be protected to 
improve grid resilience and prevent adversarial deterioration. 

The rest of the paper is organized as follows. In the next 
section, we develop our intuitive graph theoretic quantification 
of network resilience that is reasonable in the presence of local 
generation. Next, we analyze network failures and resilience 
in actual grid graphs without employing any assumptions from 
random graph theory in Section [Till In Section |IV] we present 
our novel modified graph construction and use it to develop 
improved bounds on size of the network damage along with 
simulation results on IEEE test cases and real power grids. 
We study adversarial attacks on transmission lines aimed at 
weakening grid resilience to natural disasters in Section |V] 
and present our approximate greedy methods to determine the 
critical transmission lines. Simulation results on our designed 
algorithms and comparison with existing work is presented 
in Section |Vll Einally, we discuss the insights gained and 
prospective future work in Section I VII I 

II. Eailure Model in Power Grids 

We begin by describing the power grid model and its 
features. 

Network Model: We consider a modern power grid (or mi¬ 
cro grid) in this paper that has distributed generation resources 
available on interior buses. Such generation may be provided 
by renewables (solar, wind etc.) or by conventional resources. 
We denote the grid by a graph Q = {V,E), where sets V and 
E represent the nodes/buses and the undirected edges/lines 
respectively. Let the total number of buses in the system be N. 
We assume that under normal operating conditions, the lines 
have sufficient transmission capacity to transfer power from 
one part of the network to another. We denote the adjacency 
matrix of the graph Q by Ag that is assumed to be known and 
not generated by a probabilistic model. Each edge {ij) in E 
is represented by a value of 1 for A{i,j) and A{j,i) in the 
binary adjacency matrix. As an example, the IEEE 14 bus test 
system liTTll is given in Eigure [T] 

Failure Model: As described in the Introduction, we con¬ 
sider a natural disaster that causes equipment failures in the 
grid. We assume that the natural disaster produces a proba¬ 
bilistic failure on all nodes in the system, with independent 
initial probability of failure denoted by po. In this work, we 
only consider cases where the initial probability of failure on 
all nodes is the same. However, the entire analysis can be 
extended to cases where different nodes suffer distinct prob¬ 
abilities of initial failure. The initial failure rate pq depends 
on the nature of the natural disaster (Eg. earthquake scale, 
wind speed of hurricane etc.) as well as on the geographical 
placement of the grid (Eg. topography of the land will affect 
the failure rate). Such probabilities, in practice, are computed 
by agencies like the National Hurricane Center and used to 
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Fig. 1. IEEE 14-bus test system 1271 



predict the scale of damage and help in planning for evacuation 
strategies 1^ . As we are concerned with connectivity in the 
network, we consider secondary failures in surviving nodes 
that get separated from the rest of the network due to initial 
failures in all of their neighboring nodes. This is shown in 
Figure |2] Next we describe our measure of network damage 
following the natural disaster. 

Network Damage: As mentioned earlier, we assume that 
transmission line capacities are sufficient to satisfy all load in 
the system provided enough generating resources are online 
and connected. Let denote the size of the largest connected 
component of surviving nodes after the disaster. We consider 
N — Ns to be the measure of network damage caused by 
the natural disaster. It is worth mentioning that outside of the 
largest component, smaller groups of nodes can be functional 
as well if enough generation is available to satisfy the total 
load in the node group. We select N — Ng as the measure 
of network damage as it has a key characteristic as described 
next. 

Let Af denote the net power capacity (generating capacity 
minus load) of node i in the network, where nodal generating 
capacity and load are both random variables. Consider the case 
where each Af is an independent Gaussian random variable 
with mean /i > 0 and variance cr^. If node i is disconnected 
from the rest of the network, the probability Qq that its local 
load is served is then given by: 

/*oo 1 

gS = P(Af > 0) = / 

Jo 

= .5 + / , ^ as /i > 0 (1) 

° Jo yW 


On the other-hand, if node i is connected to a group of Nk 
nodes, the probability that node i satisfies its load is given 
by: 


Nk Nk 

= P(^ Af > 0) = P(^ Af/Afc > 0) 

i=l i=l 


= .5 


1 


/o ^2'Ka'^INk 




( 2 ) 


where Eq. (I2]i follows from the fact that /^k is a 

Gaussian(/r, (T^/Wfe) random variable. Note that its variance 
decreases with increase in Nk, the size of the connected set 
that node i belongs to. For 1 < Nk < Ng, using properties of 
the exponential function it follows that 



— =e dx < 



1/2770-2/iVs 

(3) 


Using Eqs. ([Til, (|2]i and (0, we have q\ < < g]^^. 

Thus, the probability of a nodal load being served increases 
with an increase in the size of the connected component that 
the node belongs to. Thus the largest component shows the 
highest group of nodes whose cumulative loads are satisfied 
with highest probability. This justifies our usage of Ng (size 
of the largest connected component of surviving nodes) to 
quantify the functional network and correspondingly of N—Ng 
to measure the scale of network damage. In the next section, 
considering the largest component as the surviving network, 
we analyze the effects of network structure on the extent 
of failures and determine a preliminary upper bound on the 
probability of initial failure pq beyond which the network 
fragments. 


III. Failure Analysis and Preliminary Bound 

As shown in Fig. |2] we consider initial failures and sec¬ 
ondary failures in the grid and analyze their creation in discrete 
steps. Let A/ denote the vector of survival probabilities of all 
N nodes in set V at step t. For node i, we have A/ (z) = 1—po 
where po is the initial probability of failure. According to the 
failure model, node i survives at step t if it did not fail at step 
f = 0 and did not get disconnected between steps 1 and t—1. 
In other words, at least one of its neighbors did not fail by 
step t—1. We express this mathematically as 

(0 = (1 -po)]p[ u {node j survives at f — 1}] 
^ XY{i)<{l-p) (4) 

^ XY <{l-p)AgXY_, (5) 

Here Eq. (IHi follows from the Union Bound for probabilities. 
Note that for a general graph Q, this gives an inequality as 
against an equality that is obtained for a random graph model 
in where failure propagation from each distinct neighbor 
is independent. This is a crucial distinction as real world 
power grid graphs are not locally tree-like and have correlated 
failure pathways unlike random graphs. Let (3a be the largest 
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Fig. 3. Each undirected edge results in two survival probabilities, one in 
each direction 



Fig. 4. Modified graph formation from Q 


eigenvalue of the adjacency matrix Ag. Using relation (|5]), we 
have 

(1 - po)/3a < 1, then 0 (6) 

Thus, po > 1“ 1//3 a provides a upper bound on the threshold 
on initial probability of random failures (po) beyond which the 
grid fragments. In contrast, random graph analysis leads to an 
exact threshold and not an upper bound. It is worth noting that 
the current formulation does not specify the extent of damage 
in the region po < 1 — IjP a- In the next section, we present 
a novel modified graph construction that overcomes this and 
helps generate tighter bounds. 


IV. Modified Graph for Improved Bounds 

Note that in our failure model, the survival of any node 
depends on the existence of edges connecting it to the largest 
connected component. Indeed we can analyze a node’s sur¬ 
vivability by considering the probability of it being connected 
through operational edges in the grid graph. To motivate this 
approach better, consider two connected neighboring nodes i 
and j as shown in Fig. [3 Let be the event that node i 

is connected to the surviving nodes in the largest component 
through edge (ij) at step t. Let the probability of 
be denoted by Note that this event can be defined for 

every neighboring node of node i and i’s survivability requires 
at least one event to be true. Thus, the probability of node i 
surviving at step t is given by: 

\Yii) = {i-po)n U (7) 

j:{ij)€E 

Here, the (1 — po) arises from the probability of node i sur¬ 
viving an initial failure, while the remaining terms correspond 
to the survivability due to a connecting edge. In a similar 
way, we define event Bf{ji) of probability Xf{ji) for node 
j surviving through the edge with node i. This event is the 
reciprocal of Bf{ij). Thus, every edge gives rise to two 
probabilities of survival, one along each direction as shown 
in Figure [3] If nodes i, j and k are connected as shown in 
Fig. m the event Bf{ij) (node i surviving via edge (ij)) 
depends on Bf{jk) (node j surviving through edge (jfc)). In 
terms of their probabilities, Xf{ij) and Xf_i{jk) are related. 
Extending to other nodes in the system, we write this relation 


mathematically \/i,j such that (ij) G E as 
Af(u) = (1-Po)P[ U Bf_^{jk)] 

k:{jk)GE,k^i 

^ Af (ij) < (1-po) (Union Bound) 


In Eq. the (1 — po) comes from the fact that if node j fails 
initially, then node i cannot survive through edge (ij). Eq. ([8]l 
is the motivation behind our construction of a modified graph 
based on the power grid graph to better estimate the scope of 
network failures. 

Modified Graph Construction: We create modified di¬ 
rected graph from the original graph Q as follows 

• Each edge (ij) in E gives rise to two nodes Vij and vji 
in g^. 

• Two nodes Vat and Vcd in are connected by an edge 
directed from Vat towards Vcd if b = c and a ^ d (see 
EigurelH. 

Note that G^ is similar in structure to a line graph of grid 
graph G- However, there is a slight difference in that G^ has 
lesser number of edges as a pair of nodes Vab and Vba are not 
neighbors in G^, though they would be in a standard line graph 
construction. The number of nodes in G^ is equal to twice the 
number of edges in G- The size of Ae, the adjacency matrix 
of G^, is 2|i?| X 2\E\. We now write Eq. ® in a vector form 
similar to Eq. (|5]l using the adjacency matrix of the modified 
graph G^ as follows: 

Af < (l-po)Al£;Af_i (9) 

Here each node in the modified graph is associated with one 
probability of failure that represents directional connectivity 
by the corresponding edge in the original graph G- Extending 
the analysis in the previous section to Eq. (|9l), it follows that if 
Pae (the largest eigenvalue of Ae) satisfies po > 1 — I/Pae^ 
then the grid disintegrates as X^ 0 and A^ — 0. Thus, 
1 — 1/ Pae provides a second upper bound on the threshold 
on Po, beyond which the grid fragments. We compare the first 
upper bound 1 — l//3^ in (|6]l and the second lower bound 
1 — 1/ Pae of IEEE test-cases and real grids and observe that 
in all cases the second upper bound is smaller in magnitude 
and hence provides an improved tighter bound on the failure 
threshold. The comparisons are noted in simulation results 
later in this section. 

We now use the modified graph G^ and Eq. (|7]i to analyze 
the extent of damage in the grid. In particular, we are interested 
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in bounding the size of number of failures over the entire 
range of initial probability of failure pq, even below the bounds 
derived earlier. For this, we use the basic failure definition 
where a node fails eventually if either it fails initially or if it 
does not get connected to the largest component through any 
of its edges. In other words, the probability of not surviving 
(given by 1 — (ij) for node i in graph Q) depends on the 
probability of initial failure and on the probability that none 
of the neighbors of node Vij in survives. Let 
denote the event of node i not surviving through edge (ij). 
Mathematically, we have 

=Fo + (l-Fo)P[ n (10) 

<Po + (l-Fo) min (1 - (11) 

<Po + [l-po) 2_^ - - - (12) 

j:iij)eE * 

where di is the number of neighbors of node i in Q. Eq. (fTOl i 
follows from the failure definition where po denotes the initial 
failure probability for original node i. Eq. (dUl follows from 
P[A n S] < min(P[yl],P[f3]) while Eq. (fT^ follows from 
the fact that the minimum of a set of numbers is less than 
their average. Likewise, we express (1 — Xf{ij)) for failure 
probabilities in the modified graph as below. 

1 - ^f(u) =Po + (1-Fo)P[ n [Bt® (13) 

k:{jk)GE,k^i 

1 — A? 1 (jk) 

<Po + (l-Fo) X! - 

k-.{jk)eE,k^i 

where dij is the number of neighbors of node Vij in modified 
graph Q^. Writing it in vector form for t ^ oo, we get 

1 - A^ = po(l 2 |B| - (1 - Po)De^Ae)-^ (15) 

where I 2 IBI is the identity matrix of dimension 2\E\ (number 
of nodes in G^)- De the diagonal matrix of node degrees 
(dij) in G^, while Ae is its adjacency matrix. The upper 
bound on the expected number of node failures in the gird 
(Nf) is then given by: 

N 

Nf = ^(1 - A^(*)) < poN + {l-po)EDg^Ag{l - XZ) 

i=l 

<P,N + {1-po)Y, E (16) 

Using Eqs. (fTSl l and (fTbl l. the upper bound on node failures 
can be computed. If there are nodes in G with unit degree 
(a common observation in power grids), the upper bound on 
number of failures will be non-trivial. To demonstrate the 
performance of our bounds, we present simulations of random 
failures on known power grid graphs. 

A. Comparison of Bounds through simulations 

The performances of the upper bound on network failure 
over all values of pq and the two upper bounds on critical 


value of Po beyond which the network disintegrates are shown 
through simulations on the IEEE 118 and 300 bus test systems 
im in Eigs. |5] and |6] respectively. Subsequently we also 
consider publicly available power grid topologies pertaining to 
the Western US grid and the grid under the Union for Coordi¬ 
nation of Transmission of Electricity (UCTE) in Europe. The 
Western US grid has 4941 nodes and 6594 edges ED while 
the power grid of the UCTE has 1254 buses and 1811 lines 
ED- Eailure propagation simulation and determined bounds 
for these networks are shown in Eigs. |7]and0 



Fig. 5. Upper bounds for number of failed nodes and bounds on pQ in IEEE 
118 bus system 



Fig. 6. Upper bounds for number of failed nodes and bounds on po in IEEE 
300 bus system 

In all the power grid cases, we consider the grid to have 
fragmented if the size of the largest connected component of 
surviving nodes is less than 2 log N, where N is the initial size 
of the network. Note that the second upper bound (1 — 1/ Pae) 
on the threshold on po (initial probability of failure) derived 
from the modified graph is lower and hence tighter than the 
first upper bound (1 — 1/Pa) derived using the original graph. 
Eurther, it needs to be pointed out that the upper bound on the 
number of failures given by Eqs. ( fTSl l and (fTfil l is tighter for 
higher values of po compared to smaller values. The original 
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Fig. 7. Upper bounds for number of failed nodes and bounds on po in 
Western US power grid 



Fig. 8. Upper bounds for number of failed nodes and bounds on pQ in UCTE 
power grid 


graph does not provide a non-trivial upper bound on failures 
over the entire range of po, hence the modified graph has two 
distinct advantages in failure analysis. 

In the next section, we discuss how our measures of network 
reliability based on eigenvalues can be used to determine 
critical transmission lines that may be attacked by an adversary 
interested in weakening the grid resilience to natural disasters. 

V. Critical Lines for Adversarial Attack on Grid 
Resilience 

We consider an adversary that aims to maximally weaken 
the grid structure to make it more vulnerable to failures during 
natural disasters. The adversary does so by attacking and 
removing a fixed number (kmax) of transmission lines in 
the grid. As mentioned in prior sections, relations involving 
the eigenvalues of adjacency matrix of the grid graph or the 
modified graph provide upper bounds on the probability of 
failure beyond which grid connectivity diminishes greatly. In 
the remainder of this section, we focus our attention on the 


first upper bound {1 — 1/Pa) in Eq. (|6]l, where Pa is the largest 
eigenvalue of the adjacency matrix Ag of the grid graph Q. 
We thus formulate the adversary’s objective as damaging k^ax 
edges in the graph to minimize Pa to reduce the first upper 
bound. Techniques based on the second upper bound based on 
the modified graph in Eq. (|9|l will be the focus of our future 
work in this area. 

Let normalized eigenvector ui correspond to the largest 
eigenvalue Pa of adjacency matrix Ag. By definition ui 
satisfies 


max x^Agx = uTAgui = Pa (17) 

ll^l|2 = l 

The Perron-Frobenius theorem 041 states that eigenvector ui 
is a positive vector. Using this fact with Eq. (fTTl i. it is clear that 
removing edges from graph Q (or deleting Is from Ag) always 
leads to a reduction in the magnitude of its largest eigenvalue. 
Hence, the adversary’s attack consists of determining the 
critical edges that will enable the maximal redaction in the 
largest eigenvalue of Ag. This is a known NP-hard problem. 
Here, we present two approximate techniques to determine the 
critical lines that will be included in the adversary’s target set. 

Eigen-Perturhation based Attack Design: In this attack 
scheme, we use perturbation analysis O^ to approximate 
the change in eigenvalues of adjacency matrix Ag following 
removal of edges and subsequently to determine the optimal 
transmission lines to attack. Let the new adjacency matrix of 
the grid after removal of edges be given by Ag — AAg. The 
change in adjacency matrix AAg has the following structure; 




1 if edge {ij) G E is removed, 
0 otherwise. 


(18) 


Let the largest eigenvalue of new adjacency matrix be P^. 
From Eq. (Ell, we have 


Pa = max x^{Ag — AAg)x 
ILI|2=i 


=>/ 3 a ^ — AAg)ui = Pa — ui^AAgm 

=^APa = Pa- Pa ^ X] 2ui(i)ui(j)( usingdU])) 


where APa denotes the change in the maximum eigen-value 
following the removal of lines. 

The optimal transmission line whose removal approx¬ 
imately minimizes the maximum eigenvalue of the adja¬ 
cency matrix is thus given by maximizing the expression in 
Eq . ( 29 ). To determine the optimal kmax lines, the adversary 
iteratively computes ui, the eigenvector corresponding to the 
largest eigenvalue, removes line by maximizing Eq. (fTSl) and 
recomputes the adjacency matrix and its principal eigenvector. 
As shown later, the iterative scheme provides a far greater 
reduction in grid resilience than selecting the kmax lines to 
maximize Eq. (fTS) all at once, though it leads to an increase 
in computational complexity. 

Complexity: The computation of the eigenvector ui takes 
0{N^) steps via Singular Value Decomposition (SVD) of Ag 
133. Given that the maximization of Eq. 29) takes \E\ steps 
which is less than 0{N^), computing the kmax critical lines by 
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iteratively computing the eigenvector for the largest eigenvalue 
has a complexity of 0(fcmax-^^) 133]. If all lines are selected 
based on a single computation of ui, the complexity is 0{N^) 
due to SVD. Next we describe another technique for attack 
design that depends on trace minimization. 

Trace Minimization based Attack Design: The trace of 
a matrix refers to the sum of its diagonal elements and is 
equal to the sum of its eigenvalues 1341 . Consider an even 
2 r*h poYvgj- of fjje trace of the adjacency matrix Ag. As the 
eigenvalues of are the 2r*^ powers of the eigenvalues 
(/3i = Pa, P 2 , ■■■, I3n) of Ag, we have the following relation 
for the trace 

trace{Aln = E/Sf = 

( 20 ) 

=> trace{A^) / Ri 1 as r —>• 00 (21) 

Here Pa = Pi is the largest eigenvalue of the adjacency matrix. 
Note that as | ^ | < 1, if we take higher values of r, the ratio of 
eigenvalues becomes smaller in Eq. ( l20b . Thus for extremely 
large values of r, the largest eigenvalue and trace of the 
power of Ag are approximately equal as noted in Eq. (|2TI) . In 
this approach, thus we focus on reducing the trace of Ag^ by 
removing lines instead of minimizing the largest eigenvalue 
Pa or its higher power. Einding the optimal set of kmax edges 
to minimize the trace of is computationally hard as well, 
however using trace minimization has certain advantages as 
we discuss now. 

Theorem 1. The trace of Ag', where Ag is the adjacency 
matrix of grid graph Q is a supermodular function of the 
constituent edges in the graph. 

A real-valued function / defined over set S is supermodular 
II 35 I if f{A[jC) > f{B\JC) for B C A and A,B,C are 
subsets of S. In other words, the returns due to addition of C 
are not diminishing. 

Proof: Note that the diagonal element in A^' is equal 
to the number of cycles of length 2r that begin and end at node 
i. This can be shown by direct checks or by mathematical 
induction. Here, cycle of length 2r refers to a graph path 
with 2r hops (repetition allowed) that begins and ends at the 
same node. Thus, the trace (sum of the diagonal elements 
of AlA is given by the total number of cycles of length 2r 
that can be formed on all nodes in the grid graph. To show 
supermodularity of trace of Ag’’ as a function of graph edges, 
it is sufficient to show that the increase in the number of cycles 
of length 2r in graph Q after adding a new edge {ij) is less 
than the increase observed if edge {ij) is added after inclusion 
of another edge {Im). This increase is indeed true as presence 
of an edge [Im) prior to the addition of edge {ij) will permit 
the existence of additional cycles that includes both edges {Im) 
and {ij), and cannot exist without {Im). Hence trace of higher 
power of the adjacency matrix is a supermodular function of 
the graph edges. ■ 

It is a known property l^Sll that greedy minimization of a 
supermodular function is equivalent to greedy maximization 
of a submodular function and is provably at least 1 — 1/e 


(r; 63%) close to the optimal solution. Thus, the adversary’s 
attack policy in this scheme is to greedily remove k^ax edges 
that minimizes the trace of 2r‘^ power of the adjacency 
matrix of the grid graph. 

Complexity: The 2r*^ power of the symmetric adjacency 
matrix is computed efficiently using Singular Value Decom¬ 
position (SVD) as Ag’' = UP'jfU'^ where columns of U are 
the eigenvectors and Pjf is the diagonal matrix with 2r‘^ 
powers of the eigenvalues. Note that matrix multiplication 
and SVD are computed in 0{N^) while computing Pjf takes 
complexity 0{N log r). Since we greedily minimize the trace, 
the selection of one edge takes 0{\E\{N^ + Nlogr)). The 
overall complexity of computing kmax optimal edges by this 
scheme is thus 0{kmax\E\{N^ -f TV log r)). This expression 
implies that increasing r to improve the accuracy of this 
approach will at most lead to a logarithmical increase in the 
complexity. 

Resilience: Erom the grid controller’s perspective, these two 
techniques can be used to determine the critical transmission 
lines for enhancing security and reinforcement to prevent 
adversarial manipulation aimed at disrupting grid resilience 
to natural disasters. In the next section, we look at the 
performance of these two approaches as an adversarial tool. 

VI. Simulation Results of Adversarial Attacks 

We consider both approaches (eigen perturbation and trace 
minimization) for determining the optimal kmax edges to min¬ 
imize the largest eigenvalue of the adjacency matrix of the grid 
graph and thereby reduce the resilience of the grid to natural 
disasters. Eor comparison, we consider two alternate schemes, 
one where an adversary removes edges randomly, and another 
where an adversary removes edges in the decreasing order of 
their betweenness centralities |[30|. We plot our results for the 
IEEE 118 and 300 bus test systems and the UCTE power grid 
network in Eigs. 0 [10] and [TT] respectively. Note that both 
algorithms outperform random and betweenness based attacks 
to reduce the eigenvalues. It can also be noted that iterative 
eigen perturbation reduces the largest eigenvalue further than 
edge removal based on a single perturbation computation as 
mentioned in the previous section. Eurther, it can be observed 
from Eigs. |9| and [TOj that increasing the value of 2r, the 
power of the adjacency matrix, leads to an improvement in 
the trace minimization based scheme as it approximates the 
largest eigenvalue better as noted in Eq. (l2Ti) . 

VH. Conclusion 

We analyze topological vulnerability of power grids to 
probabilistic failures introduced by natural disasters in this 
paper. We present intuitive evidence that in modern grids and 
micro-grids where distributed generation resources are present, 
a reasonable metric of damage is given by the size of the 
largest connected component in the post-event grid graph. 
We analyze the evolving failure process that originates at 
nodes with initial failures. Based on the largest eigenvalue 
of the adjacency matrix of the grid, we present an upper 
bound on the critical probability of node failures beyond which 
the grid fragments. Eurther, we present the construction of a 
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Fig. 10. Comparison of adversarial schemes to reduce maximum eigenvalue 
of grid adjacency matrix in IEEE 300 bus test system. 


modified graph to analyze the probabilistic failures and use it 
to generate a tighter upper bound on the critical probability. 
This modified graph construction also enables us to derive 
new non-trivial upper bounds on the expected number of 
total failures for all values of the initial failure probability. 
We present the performance of our derived analytical bounds 
through simulations on two IEEE test cases and two real 
grid data sets. Einally, we discuss adversarial attacks on the 
power grid aimed at damaging transmission lines to minimize 
the grid’s resilience to natural disasters. We develop two 
approximate algorithms to identify the critical lines that will 
enable such adversarial attacks. The first algorithm is based 
on perturbation analysis of the eigenvalues of the adjacency 
matrix and the second algorithm is based on greedy minimiza¬ 
tion of the trace of a higher power of the adjacency matrix. We 
analyze both algorithms and their complexity and demonstrate 
their performance against random and centrality based attacks 
studied in literature through simulations. Potential areas of 
future work include improving the bounds and developing a 
framework to incorporate topological analysis into power flow 


based studies on grid vulnerability to enhance its practical 
contribution. 
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